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(57)Abstract: 

PROBLEM TO BE SOLVED: To perform mutual 
authentication by using NTRU public key encryption 
method. 

SOLUTION: Mutual authentication between a server and 
a client is performed with the protocol using an NTRU 
private key encryption method. By adding random 
numbers which are going to be seeds of a session key 
and their hash value to transmission data, it makes 
possible to check whether description failure is 
generated. The session key is formed on the basis of the 
random numbers for the session key, and data 
transmission and reception after authentication are 
performed by encryption. Process of the NTRU 
encryption method is light and the protocol is simple, so 
that mounting to an assembly type apparatus is enabled. 
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(54) nmio«»] ftM.umisXT&mf®jLmwj&. ffissssEgs, tttAcewRft 



(57) [Bft] 

[DUB] NTRU&H«lt#^nS»«!flaorfflSBiE 
NT R U&H»B#;fc£*J8t»fc:/n b 

£*©^y^»«4ftia.4C£KJ:»>. Decript 
ion Fa i lur eWi*rif>**£54»t**9 

3SS#*Bf#fbLrfif5. NTRU©Hf^b^W®il 




[#fFff5R©faffl] 



mt, ^m^ct^w^ttwrnmrn.^^^ io 2©ggKi*ii-| l xf^7 , i, 

Ct*«Pftif SaNOHlKgBttOtBB; fflSlSiOTOSL^N.R^-b ? -> a > • *-©ffiS„ 

BE^f-A. ^tSiittcS^vi/alHash (SJ * 

cm*3i3]i98aa#fi*aE^aB. imffi#©&§ia srastt/t\ n„> s„. Hash (sj «$i©sa© 

■C*»S/b> • *-©«£&*&»£*©;> 5»f»ti* &gg^E.t:Bi^bL/tx-^E, (N„. S„. Hash 

BtmLTii{rf££i&ft. a#tB^e»S€Lfcr (SJ ) B^&H«E b *£A,ft»?*gC b & 

- * * &ftmmmxmmt l x . -k^> a >-*-© ifeK^icD^ittcg^ra^^^^i. 

S£&£a$£*©^Wffi£IK'DliiU tjfa^ *l©SB:& *2©S»©*f*SC,,£lfflB0fc 

•*-©«4&4a»©^»i'»«*«HL-CCn?&K « v Bfl-OiBBftTSft-f-i'E. (N b , S b , Has 

9W3hfc»^t»V a fiiJttS-rS£l4«:«fcor. ftH 20 h (SJ ) WHbL"C\ •fe^a> • *-©«S b © 

»C*tf*a^K^l/*3WH»t«W-*, C£4 «>J/»iHaBh' (SJ 4tt*t,T» S#L/fc-"» 

**»t-rai»*3iUClB«OfflSBI£2/^f-A. y.IHa sh (SJ i-SWafrSsWCfcoT. & 

W»f-i»aBWi*ai. **KW«iifc»cS.©^»^afIHash (SJ * 

*3 6K«**C£41t»£-rSIII*ll{CiatSCDtas: ttt»l<T. N.. S.. Hash (S.) 4m2©«g© 

BE^f-A. ^WE.-CBf^bL/fc^-^E, (N., S„ Hash 

[»*3B5] M^if*4/M/'r8a3tiSaB»©ffitIII 30 (SJ > 3^-*jfe6K9ai/fcft#N,,<!:d:t> 

■csf jeo&HW^TErssfflir » r fflsisiE^ff 5 tssB k» 2 ©swcSHrr wf^'i, 

fiSBSMOf-ff K-fe ^ a > ■ *-©«i6Sa *A«BtcJS*OfcC<k«:j£Slyr. »2©^fcW. S 

Bi*©^»5/»**fllirrSe&KJ:-9'C. a^fb© «©«««-CS#9 s -j»E 1 , (N„ S.. Hash 

$3fora*w**«****»*r*«^i^* (sj ) zmmtbx, ■fe»^«>-4 s -©«s.©^ 

*«*.SCi*Wft£-j-*fflSBiE*fe »J/»iH«.h" (SJ «t*l/C. fSWc^r> 

[»SR316] SiHaaH»9#*SB. NTRUSIUglttt ^ffiHash (SJ £-gnr&*>5*K<J:oT, 

C£&^£*S»J^5fciB«©taS 40 StH#{hK5fe»0fc*»5*>**B|-ra^^?^ 

ISIE#&„ £. 

ommc* ?->a> • *-©«i«taaj»t*©^7 5/ as. m.asm<mm.imi ©§&a«3nrr**^ 

uc^-z^&ftmmmx'&mthx. -kvisay- n\omg&. ^mLfcSLm.m^x^mvk.nm. 

*-©«i ttSSUKi*©^ 9 U*.m*m*) ttiU * » W»!&»S*»n*2 ©$|g4*AStB-r5^f- ■» 7" 

mmicmim^ticimbttfr&frzwmz. ct e£*^ir*iiij^9tc8s«©ffl 

*4S«i-r4a«i5(caB«©*asi8aEfiffi. 50 ssraw. 



JCiB»©tB5JgiKfi£. 

] n 1 ©«g£»2 ©^g©ra-ciws©<&^ 



!&Lfc-i2yUa>- *-©«S.XtfS,,*afc:-fe?;/a 

* 1 KtF* 2 (Dmm&WHz ? ^ a > • *-*JBl,>fclB^ 
^^©jSSSfcfrS*^?:/^ *S6tc«JtSCi 
£#ifc£ -T *g»$g 9 KIE«©ffiS8aE*ffi. 

1 2 ] »m«H***0T8tt3ftite©»Ki 
©IH-C9f3e©&H»t#*S*ffil»rffli:BaE4ff 5 ffi 
IMfEgg-cfc-aT, 

i. 

fSURNi-fey^a^ • =r-©iSitr>a>' *-© 
3MMB? * L fcfc*t r - * £ S #©-&gBilT«^t 

{bur. a#ffl#©ffl5Bffiffl©su»N'4afi«*4s 

■fey Va> • *-©«S , ©^irJ/»4IH"*fH|t0r. 

h ■ i h s *>5*p k j: -o xwrnx. m 

[1**11 3] mEAPMI#9#£tt> NTRU£§B« 
Bt##5£-C&3, SW*3S1 2K1E4S© 

ffiSMEttg. 

0 w ofcaffiti*©fflHBe«©a»N ^anti^cc 

aftffi##> o fc S»©ffiSHiEfl3©SUS#>, s * 

1 2 KfE*8©fgSlgEilg 0 

[M$B15] S#-CSJSRlyfc-fe75/a> + -©asS 

R-fe^> a > • t-^ffl^rftosari©!!^^-*© 
ssse*tT5^ai, *s t£*!t$it£-rs 
BfcfcB i 2 KBttDffiiasiEKS. 

[sit#jgi 6] mmstcom-emjZo&mM^tt 

fflEBIUIiOSURN £H£f 3 X f77'i, 
■fe?->3> ■ *-©«£&4a«S*a£-f 
4, 

* -7 a > • + -©a©^ v */ o.m\ rifsi-^xf 9 

SU!N4tr>3> • t-01Sife-r>3> • *-© 

«©^ 9 ^AitH«afi4B^©^HHrcmti/rssflr 



(3) «H2 00 3-l 2492 7 

as*? a* 6sft t, fee ^f 1 - * ^ e^©&nwrcfi[# 

Ltcte 9 %> a > • ^-©g S W-e©^ » 3/af| 

HZ9^a> • + -©«S , ©^»«/»|aH"*ff»U > C > 
H 1 £*H«6*HftTSjfc5*R: J: -> T&BlittCfcW S«# 

immu 7] i98B&ii«i»^rsi». ntru&h* 
io b^^-c&s. c i %&mt t&m&m i 6 iciats© 

») tH LfcafitB*©ffiSBHEm©SURN '£a#fl^K 

jHSffi^*>e.gML&a»©ffiSBH«©a««j. s# 

-C?S£Lfci§[J&N £^U>#>5a>r v affffl#*^A« 
#B 1 6 KSB«©ffiSBff*ffi. 

20 y ; f6©sa35(»^)Smofc•fe^»^a>+-©«s• ^atc 

itr>a>- ^-fc^Tflb©!^©!****-*© 

f 1 6 KffifS©fflSJgfESffi. 

[i»*S2 o ] f6©ilgi©iiiriJfS©&IBS»S#*3); 
4fflt»-ctBsan%tf 5 fc»©fflssffles£n > tr * 

30 'JiTiJ, 

fflU8iBB©a»N 4 xf^i, 
* » a > • * -©a £ a &sjfc s £n*-r 

£> 
7'£. 

SL^tN£-fe9^a> • f-OlSitjJ/a^ • +-© 

■fe'^a> - *-©as '©^9^^.#H"4tf©Lr, 
H ■ £ H "*HRT5*S*»K:i o r^»>«K*jW 

mmmm^mm] 

[0 00 1 ] 

50 «EHE$'X?'AR0fifBEHE#ffi. fflSiSiE^g, M 



[0 002] K«3*L < B, #3MBB. &H«I©^*SC 

ENMKtKH'r*. 
[0 00 3] 

[$*©&«] ir^. flm^&ffi©?n»ft&2i$£ *> 

tS^ot, a>K»-*4^£*S^©1*«ttg# 
«SiaK»-f>*-*9 Kr£©ffitt*? h>7-*fc:S 
USti. 3>tf»-**W©#jr*» lWR©«*f-»Si- 
IHft «&£©1M»«ft*£P3i» JCfT 5 C 

[0 0 0 4] *»r«7-*B> #&S1**e#©¥8£ 
or^wcttft < . *Xt>Mfttt £©#S3 >t->-7© 
JR^*\ «£*©«{cBt^to« r*? YWM\ * r* 

[0 0 0 5 ] 0J;iB, PDA (Personal Digital Assis 
tant) © J; 5 ftjffflf ^$K&fiFKgg«£3ittr S C 

^W>P-F«Ci(C<fcot, PDA±T3>f 

> v £ u r m b ts 1 t, »9 c i # -e % s . 

[0 00 6] flfcfr, 7 ; > ; ^;U^©7 :: -^^3>7 v >-> 

©iiS^2ScKB»T§f^* o , 3ft«ft3©fti!*«: 

[ 0 0 0 7 ] Sfc. ft*©«S£ Bfflitt . * » b V- 
*Bl3Uc*5l,vt:B. fflasfiit&Offl^Ka^^^^^S 

^iwti««ma:£©iSB»ff**»6fiaiufc»). 
if© ^7 a ^i/*«t o -rs uc j: e,^tcffls 

[0008] c©fc&. * sr b ?-*lft»rtt. iE3ft 
fi#£©^m?l^lT5^<, rtasaffij ti> 5^(1*4 

[0009] ffisnsBcB, i>fo«>s r&mmsmj 
5= &§MWB#7;Va"»;XAB. -#©**» 6flt£©« 



(4) #132 0 0 3- 1 24 92 7 

6 

*»ffi-r £ C £ 3ft9P»KH»C* S £ l> 5 ttft*KK> C 
£ «c <fc 0 . -#©«-eBim o fcfitilMrff ©il-e l * 

Hj -»«:&BBLri|-r?«>fiWC*4J:5K 
-TS„ tit, a#ft©«* rieffiij t>fttft. ffeAic 

[0010] 4HMWf*^*SySLfc*£. &SB& 

*mt bxmmiffiMz i off#rs«w -cj:i>© 

10 -C*. WljWggK&i. 

[ooii] Lipbte&h. timmmsmz. -» 

K, HW<fc*Of{ca^t©«!ffl36JSfc< 1 CPU^7- 

a. e^t-a#ft{ci33iffl±©3a»B!tti»*j. w*-? 3 

Sfc. PDA©J:5&/hg (fftt>*CPUA\7-*W 
*) r^?^»;iBtt©iH*ii*«W8©»^R:tt. ffiSB 
iEK&HflBit^SSC4ffl(,>S©B:HJi-c*S. 
[0 0 12] LfrLKfrb. t>L. •fey>a>-^-f6 

20 ^{curasnssuR&i-©^-**^*©***^* 

©S5L«*«o-rH*36S-fe » ^ a > • ^-^tSmtcff 0 B 

[0 0 13] C©«fc5aBM*|filWSfc»K, "NT 
RU (X5?b^;b-) "iPftftia. «<fioffl«K« 

[ 0 0 1 4 ] N T R U WiffVi «> S < £±tt£IMttt 
*©«HB*Kl*8e*©SPBjWS#S/ 

30 Xf-Aitt^t20fg^640 

NTRUtt, 5^^f A©lt;3WiSSt?*0, ^Sftf 

US h5*-m©^ f@|q) ttf'U x zumirz A>7 

7?,h7i>*+~<Dmm$>»im-c$>6 a ntru 

S6KNTRUB, %ffl<D**a.Vfi '*594h& 

y^tMRfiwrscii-cirs (ht 

40 tp://wNw.ntru.co.ip/) . 

[oo 1 5] n t r u b. mmftm^mktm*w% o 

N T R U©7*=f 'J XA*^f -T *tt»^0-fe^B*« 

fewa(craT5ci*s-c*5„ ra*>s. ntru© 
■cfffl-c* hctiph, m^mmm, ?v>$>v- s * - 

^5, ^ • ^b— PDA&i'OfA-f^CtffilS 

so *4sn?> D 



[0 0 16] LfrLftifih, NTRUtZfmtm^K 
ffl. mmt (Decrypt) CDKIf-^tfSftS 
il,^x5- (Decrypt i on Failur 
e) *36£r5C4#*5. 

[0017]Decryption Failure*! 
[0 0 18] 

[$MB*iJRfcb«fc5£-rsSIH] *38SH©BWtt, Wig 

^m&nzaytma yTy^ommncis^xw^iemm 

KffiSBBB*»a{cff 5 C iff?* S , Sft/cfflSMK 

[0019] *IHJ©MftSa»tt. &BMKflH£fciS* 
tifcfflSiSIE^ * f AMMMM *B21SIE£g 
[0 02 0] #*HH©M&4BMK. ttgSttftyitfBl,* 

[0021] 

ss^Sjor&snfcfeor*?). ^-©mi©fflJffi 
3 > • +-©«i«:5ajs%sja-rs-fe7i'3> • *- 

•fe^>a> • *-©«iSc*sa»4*^»J/a«*ff 
A 4 c £ §#Sti-T SfflaigiE^Xr AXBfflSlgfE* 

[0022] flu ccrao r->^fAj iu, am 

©=£g (Xf33l*3E©««**l-ra*j|frEy a -;b) 
J^Wfc*£0fc!»©t: 

-JU*s#— ©ff#f*3K*S*>53&>B#(cratoat>. 
[0 02 3] *^BJ©H i OMmimZffiSMMtsZT- 

ab> c p uA7~30^-ry«'jfi»AUh3&gnm 

«H*©fflEBK*fT 5 C £ £^*lt L T. NTR U&I8 

[0024] NTUR&mmmm^^m^tcm^ m 

mt<D£:%k (DecriptionFai lure)* 
8£T*T?rtBtfc&i*5. fct, *»W©» 1 ©flBBBCc 



C5) WH2003-124927 
8 

JB©x-£4>K:-fe^>3> • *-©g£ &£&&£■£© 

^ » is * mzttim §ci(Cct->r» a#{fc©*jifcr>j is 

[ 0 0 2 5 ] XL Ct. «(IBa^t«S^X«X^ v V 
tt, iHt*B^©&PI«-C-fe y>3 > • *-©«4&SSL 
»4*©/^^tf*lif^fcl,rjiHI-r3id:t>ic, M 

io ftti^ e-gfiLfc^-^e ^©*i«^-ca^{t l 
r. -fe?->3> • *-©«£&5a»4*©r»? j/ais 

'SrHK^tBU. •fe?t^a> • *-©8ittS&»©^» J/ 
-f-5fl£fCj:~>-C <&«ttfctf&a^tfc^L:fc#> 
[0 02 6] «^©ifc|fe&ij@#Tl>&t,»£!p||»r 
• *-©«£««:* »^ 9 >-*-*£]l8LT. 

20 rt&„ -r&fofc. HKfettffl^>3>'f>^©|B®tti-© 
[ 0 0 2 7 ] t fc, *$Qg©jfl 2 ©flftjftt, m 1 ©gg 

isiE^s 5 ffls^iE^sr* -> x, mi comm.® 
&mmE . *^ft:*f»g c. «* 2 omwicmm %> 

XT-vVt. W2(D^mf)K Hl©4£g©ST»gC, 
SHSBbfcSt tiSBlEffl©a«!N b RDe*?J/B>- 
*-©fflS b &£l&T£££&K:Sb©^y^*fIHa s 
h (S„) Z^W-LX, N». S». Hash (S„) £fg 
30 l©Sg©<aPg^E a rBf^{tL/cr-^E a (N b , 
S b , Hash (S„) ) £ v a#©&PMtE,,*£/U£ 

s^s£c b i £ fetcm i oysmtemat&z.?- *> ~f 
£, mi©«g#s, m2(Dms<D'm*m£c>%mwb 

tcm.. &ft<mmMX%i37~ZE, (N b , S b> Ha 
sh (S b ) ) ZmmtLX. ■fc»S/a>-*-©«S l , 
^'^-iHash' (S b ) ^ftmbr^ 
r> 3 flHash (S b ) i-^tSWfci-jt, 
5ffll»c*i W *«#ittci«cJ» Ofc3W5*>*W»i|"J- 5 ^ f- 

40 ©«g#S, fflSi«E«©ja.*N.R^-b95/a>-+- 
©lS,^-r5iit)KSa0A,^IHash 
(S.) ZHnbX. N.. S.. Hash (S.) 4^2 
©«g©^S F 1liE b rBf^tL/?C7 ; "f E b (N.. S s> 
Hash (SJ ) S^^-^effiOWbfcSUS 
N b £4feCCIB2©igl«:SyrrS^f ®2© 

I >*>5*»t?» 1 ©$|g£#AflilSTf- SXf^i, *A 

«5S»?Sfir"$E b (N„ S.. Hash (S.) ) 
50 %mmtLX^ tr>3>'f-©lS,(DAr^| 



Hash' (S.) ZSmfC. SILfc^r> 3 fHa 

sh (s.> i-ar-s^s^fcior. temmcm 

EBHH!©a»Na4# 1 ©SHfcSffT-SX^ ? y 

[00281 CC-C, CPU^9-*S^tjltygi 

[0 0 2 9 ] *aSK©»2 ©MffifcfcSfflSSSESffifc: 
»iae8B2©«Btt. S{i*l^£fflSlliE-f 

«#*fc©*Jlfc&ie 0T I » ft l»tg^©* . Sl» K±J£ t 
"C, ^OlS©'?--- #©•£?) 8* 9 4. ■fe?^a> • 

it b x%m <* n *<&©&■ t omxm £©&mhm# 

3C*ffllr»r fflB383E*tf 5 ti5BiM!x«ffiSBE£ 

S^SXBX^ ';7'i, -fe s a > • +-©«©^ s. 
.xfiiH^tf-m-r^SXtt^f-^^i, HJStNi -fe^> 
a> ■ +-©SSi-fer> 3 > • +-©a©^^~>^<i 

X f -ft . ffiMffi^* ^Sdl/feB^S*- 3? * !H#©& 
HMWHfcOT, S«tB^©tBSiSira©SLi!N'i 

fflfitl#!&Sa^LfcH2-y->3> • *-©i«S 'SO'-e© 

h "*s-Sc-rs#>5*>}c «t r<&»&cfcw -amebic 

[0031] cct, cpu^f-*»*^rc^*ys« 
3as/hsaa»i»«4**©fflSBiE*fT 5 e <t***b 

[ 0 0 3 2 ] *te, *^©H3 ©flffiCcftSfflSBK 

%m bfc&m>tmmmmo>8Lm&, mxm. btdi 
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[0033] *mi<Dm3<mwimz>imwm&mx 

ttfflSSHEftffitCfci-iK. »iao«2©»»*. 

or. a^b©*Bktiao-t:(,»&t,4C£*«fflW*ci 
SEfc. a-^k©*»*jei/Ti>ai,»»^© 

io -e-ur, ^©fg©-f-£©^DiM£, * 

■^> a > - ^--c-^tL-rsse-rsciicj:!), m 

3 S ic J: & %S •fcfiaS*!* <'CiOT#5. 
[0 034] gr/t, #M§©|f|4 ©MMB, ffi©SS£ 
©Iffl rMffi©&H«»^#S*m»TfflErateif 5 fc 

fcT * - * nlBBBST « SWKtttt LfcS3ttttW*r* o 
"C MS3>f*-$ •V7|-)x7B 1 WSHHEffl© 
£L8*N£l§£T£Xr vVt. -fe^>a> ■ *-©«£ 

«©^ ? ^> %ft»T 4 ^ ^ v Vt , SLI^N i * ? 
~> a > • +-©SS £ -fe ? a > • ^"©a©/^ y ~> a 

«H«iflwa^©siMtriitiwbi/-casfli-r*^f» ^ 
txwt b x . ii#fB#©t mmmmoim n • t 

^#S£fKt/fc-fe > • *"©«S 'RO^©^ yt^ 

5 , ©^»J/*faH"%lf»Lr. H'iH'W-SW-S** 

S*hc i o r^ii^tc tew §a-^{ bcc^ u fc*»s*> * 

[0 0 3 5 ] *|»H©»4©fflnB{C«Sffitt9SI»». « 

6. C©J;54«»tt. CD (compact Disc) 
^FD (Floppy Disk) , MO (Magneto-Optical dis 

c) tet°(DmM&i£x^m&<D&wmt$x&?>. 

B> h^-^ fl»©K8!|£ 

40 mfettirO &£©eai«ftttt*esoT3>hr a -if 

[0036] C©J:9&Emttti£. n>f^,-^-> 

^f-A±"C^©3>f*-$ • V7 F')x7©iK 

1^1-4^©, 3>b-*-^ - y7 btxTtmm 
wt <Dmm±xim®z±.<Dummmmzfembtci>(Dx 

iitbXWi^.Oayii ■ 77 h7x743>e* 



iffgf 2003-124927 



[0 03 7] #fPJf©$ 6tcft©gW. #ii^J*tt. 
[0 038] 

[wmmmvBmi ##pjb, n t r u c r y P t 

o s y s t em s|±*^u^|fM^^^L 
[0 03 9 1 NTRUB, H»^«^^F^Il^^ffl L 3 

n t r u©tjI/ =nj xa^^t f sftit^n -fex b*k 

aK^Offl-r-SCi^Tt-S. T&fc>%, NTRU©&P§ 
«T*SCi*^ ^-f 7 > MB, iDt> 

■P, PDAfti'Ol»f'WXKfeliT, mtiW 

[0 04 0] A. NTRU&gggtBg-Sf^TA 

[0 04 1 ] NTRUOBS^fc&fflB, ^gtSttft; 3fe 

We, p£q2ffl©u#*->a>--ty»ntcB-3<il 

NTRU©SBf1HBi^v'Xf-A©-fe + ^,yx^ 
F ®G = H 



*££BK#K 4 ffiStCSC^^h^^-rciBg* 

[0 0 4.2] NTRUBf^t->XrAB, (N, p. 
q) £t»5 3o©ffl(trf9y-$r£. M«€^N 
- l^R©4ffl©^3HS;L f , L.. L, , L.rjSOfi 

) (P, q) = 1 (g*S*Jtfc*Jl) tSSCii, qB 
[0 04 3] 

[ftl] 

R «z[x]/(x"-l) 

[ 0 0 4 4 ] S«F (ER) B. EfFCC^r «fc ^ ft^S 

[0 04 5] 
' 1*2] 



[0046] ttc, v>yR<Dmmm^"*"Zjm& 
a-c*f) . m«F t G©jsnM*ji»«BTS©ji?) 

[0047] 
[»3] 



[0 048] NTRUi^1-§/c*(i:, tK^gffiTC 
B2o©3HESf. g (GLJ fciSWfS. -#©^ 



[0049] 
[»4] 



F, ®/ -l(mod q) and F p 0/ -l(mod p) 



(1) 



[0 05 0] H-^fflJ-eB^-eOT©S£ft»T£„ 
[0 0 5 1 ] , 

®£ ( mod p) 

[0 0 5 2 ] ftf^Kfetf 5&H«B±5$r£3*i-& 

®CfC*4. fib, «#WCB, F„k#WT&f?L 
Tfetfc< %^>©^tt~e*-5 0 
[ 0 0 5 3 ] ftrfK NHNNttVflPHfMiC M v 
j£fiLfcl,>i*£. *-r, ¥£©« L. ©f^6 p< 9 -fe- 

ym^ji^-r-So #a>t?, i-^©^s« (gl* ) * 50 [0055] ±^'Bf^fflij*>?.a-^#fflij(c^fi§n/t 



(2) 

©ft**fr3. 

[0054] 

e = (mod <?) 
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[0 05 6] m^mw. %m vmmu ?m-v> e 
<mmtmm^mm^m>±^m^m f . zm^ti 

[0 05 7] mWt* v^~V> e fta#ftLfcl>«^K: 

[0058] 
HR7] 

a =/ ®c (mod 10 

[0 0 5 9] a##tta©»»*-a/2~a 

/2©«iiii*rcaBR-ra. sa*§s»flas*»-3^9s; 

[0 0 6 0 ] 
Hfc8] 

F ,(30 (mod p) 

[0 0 6 1 ] £U*WUr*fci5{c. NTRUftli 20 

©j81R##rc, Decryption Failure 
[0 0 6 2 ] B. ffia^^Phj;w 



law*. 

[0 0 6 3 ] *|8W«:«SffiSSiE5 p ia haJW*. 09* 30 

Sa-y?? •7'U--f-?> > PDA (Personal 
Digital Assistant) &i'OffIOfA-f^(CfcU 

[0 0 64] HI KB, 8KWfi*JC*tl/t3>ir->yE 

[0 0 6 5] lUHK^-f J:5CC, • 
A«, -f>*-*» M l©<fc5&J£TO&*? r«7- 40 
«S«tKtt«»IM*K*flTv^v hilStt 

£©-9--^%!i«-rs»iM*a®iHi2i. *©«© 

HwLfcl,»*» h«7-drr?»SS*ia. 1 
2 »H7-ftt. 0$-*?HlKffi 

[0 0 6 6] -f>*~*» h 1 lifclt, MROIN-^ 

7 i >'>?:#*4-t?ie#-r53>f>'>BHfB-9'-^'l 3-C& 

«^rur-r>*-*? hSS»Sftri,»-5^-v^;u- a so 



>k»-« asmss 1 4 £®it-f 

4CiT»atil 2SSt!^>*-*9 HIE 
7*-feXTSPDA&<t-©fiWR$5fU 5K*fUT, #B 
•C3>f->y©SHMf--b^^f^ 0 
[0 0 6 7] [«£*©««] ©WCfeWca^J: 5 

tWttr&ftH. C©fcft. 3>r>->4««iMl 
4£©«MfTJfe*>i5«SLfcQ r a— tf©^7^^>© 

[0 068] C©fc£>. 43Bt0ftBK:ft£* » 

-So * fc . «#tt«s* 1 5 (DDsmmji* * * v mts * 
9mm. < w v 3 Kx-mmm 

&NTRU4SM»IS#;*5£ (mi£) *JBl»fc*IEHH*- 

Sffluru^o 

[ o o 6 9 ] m 2 km., xmmmctoz * ^7-^ 

• i/*^A±r©3^>?E«tf~tfX©ilto*tt8 

[0070] ^-r, a>f->^E«f--^i3tt. m\ 

(Xf '?7'Sl) . WSMM&VK.-kvlsa^ 

[0 07 1 ] ^i-C, 3>f>7Ettfwq 3tt N ft 
SH*«S.;fc 1 5 m b -CK^j8HB*ff 5 ( * f - » 7 - S 

3) . m&nmu, frxf-5r^s2r4j*3n&'te»v 

a>-*-fcflH>5C£T, t,Tfr 5 

[0072]»>T, n>r>ySBffi-9--/tl 3iJ, 

»s/ B > ■ *r~zm^x?>T>'yifmm$:mmtb 

t, ^ft$RS*l 5«£frfS (Xf-;7'S4) o * 
[0 0 7 3 ] CtifcftU «R»HH0K1 5MTB. § 

ft Lfc3>r>y^a ; &-fes'^a> • t-ra^tr 
sit fete t(D=iy7~>'mnM*m^r%:mb?cm 

So 

[0 0 7 4] fcfe, H2K*Lfc7n-K*»l»T. IS^ 
Mi2>f>'> ©SHff »ffi©« Ati#*T «fc 

[0 07 5] *3US^-CB. CPU^^-A^W 

* y §a*vj^$ %sR9f*ws^©tas88iE$fT 5 c t z 

y y'S 2 Ktetf StaSBiBIBlKNT R 
^■-5 J: 5 tc. ^QfcJ^jBKffifflBBlE^n h 3;l-e 
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[0076] ifc, SSmf-ZtpKHvisaZ' • 

ecription Failur e*S|afr 4* 
5!&»**x J: Sfct/fc. Decri 

Ption Fai lure^tW*>£'^Mf 

££Wnrsc4#-c£s. 

[0 0 7 7] 03KB, 3>7^SB©1fw?l 3©& 
J8*llJSS4«5W«^0Tl»S. imscc^-ri^cc, 3> 
f^Efi-P— ><1 3B. H lft 4*©* 

<I»3 1 4, £9flNtt&Kl 5&£©#«i©i8I*>63 

fiofcK^»g*«aE-rs«^»««aEaB3 2 4. a» 
toxg^3 3 i. y-j* 1 3 s#©*p#s*£j[fcr3w 

-f4g££fiSgP3 4 4, s©y 7 ■b-y©H^ft^3E®^ 

1 3 sMmmm • AfflM^Mmu^v&ffl 

m 8 4, a>f>?Kt»- tf*££tffc?Fg|5©«g 

[0 07 8] m^«^fflEg|53 2 B. ££{SSB3 1 
ft 3ftfcJ««f»fRS* 1 4©H?g;gC e r t i f o c 
at i onA4Mi5iifeiC C©m^»giC#3: 
*l*8HWff»»5til 5©&H«E.*BHJHH/C. 
■;S|3 3 6fc&#LTfc<. 

[0 07 9] ft»S£3B3 3B. fflSI8SE«:ffil»6*iS 
SL»N> 0 fc 9 . -fe ? %> a > • * -~©«4 ft 5SL 

$?s t ££ffrf cn6©sL^N„so f s ! ,tt, mum 

^gSS 1 5 5: 4©ffl{fffl^ 4-te-^>a > L T t, > 3 

[0 0 8 0] *F#S3aS»3 4B. 3>7->7@2ffi1f 
-^1 3B#©SH«E b *^*y«3 6&>5K9ffiO 
tT. C©E„££A,7ai^S£Ce rtif icati 
onBSSlfiU, S&S«»3 l#><&a>7->yE©5te 

[0 08 1 ] Bf^@Ig]33 5 B» ^«fR«* 1 5ft 4 

©afiffl^K^rr a t 1 - * £*m>&H* e . t? m # 
s#B#©tsaN*c«#ffc(,fc »?■*-*. *fc, ra^a 

BB3 5B. a{gffl^4gftb^^fcH^©-fe^^a> • 
^©^^-^©Hf^fbK^l^ C 4*-C* 5. 

[0082] mmMmms 7B, 5ft4 

©3>f >->iee5fc4©^-CS!IE®ffi ; &tf 5 0 WB, 

am«^*>e.©»t y ^-fe-yfc***;*?*-*©^ •> 

*i'»ffi4JI£T£t4KJ;*3 1 SUffi^***^* 5 
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NTRU4MM«H-*5»ffll»T-t»4#. igfEteffl§P3 
7B, ^ s> i^ffi©M£fcJ: 0, Decript ion 
F a i lur e*JiS*ri>S3&»«*»4^* 7 *-T5 

[ 0 0 8.3 ] ftfc, a >^>^|2Mf 1 3 B, 
©^-F^xT«g4t,rf ; if-f>-rsc4feBj^*. 
S#s, V-ZZt— fa> (WS) X«^-V^Jl" 3 
(PC) 4»fH3l5-«»ftH««5/^f- A 
10 ±T0f5£©lJw< • T:/y*-Va>*jBtt3tf$4<,> 

[0 0 84] ifc. B4KB. 3>^>^E^-^1 
3 *» 6 a >^>->©lBff IT- ^ttSMffifiRMtf; 
l 5©atMtflEt«=a;WK:^uri,>a. IBMtc^fcfc^ 
1 5 B. ifg^Hfg 1 4gE&"C* » h V 
-^KgiLt3>f>'>iEI|-!>--A l 3 4©H"e^ v 
te-iXDM&fs Zft *i tc&crm^mi 5 14, 3 >f- > 

yEfrF-xi 3ft4©^gi^i:^6SfiLfcmT#« 

SAME* 5 2 4 . SUffiS«J5 3 4 4 

20 8Hf t»«S* 1 5 i#©«^»* 5 

^gR5 4 4. jgfi y » *-i?©«HMfc«Mry 9 *-y 
©«m^f J 5Bf-^&fflS53 5 4, |&£LfcSLK^Nff 
tiHBifS* 1 5 HI £©**#» • ^Biil^ffi^ffl^©^® 
ft4*3TS©7 s -^^«S-ray* i ;BP5 6 4, tSfESSII 

f>?*W£MWr*3:/f>?8*»5 8fc. 3>f- 

>^ifi(§-9— ^*i sfr^oHiss^jBa-i-sa^yiaffi 

[0 08 5] m^S««iEgR5 2 B, iHSftgR5 1 "CS 
30 ft §^fc3>7->^12#f--^ 1 3©m?*£C e r t 
i f oca t i onB£&fE-f-54 4&{C, c©ST-g 

[0 08 6] SL^6^5 3 «, fflaigfEKffll^n^ 
SL^N,4*fiXl>fc0. t?->3> • *-©«4&Sa 
»S.*£l£rS. cn6©HJ!iN.aDtS.B, 3>t=- 
>'>Seflf— A 1 3 ft 4©H<lffl^ 4 -fe v Is a >#q«£ 

[0 08 7] m*m%£j&m 4 B, mWfRS^ 1 5 
40 S#©£iiliE.£^y®5 6a>6IMfcfJLT, C© 
E. *S/U3r?»SC ertificationA* 
a^l/T, ^MBP5 l^e3>f>^SB^4ft-&3 

>r>->i3fiif-^ 1 3«:aari-s. 

[0 08 8] Bf^ffli|55 5B, 3 >f->^Kff^-^ 
1 3ft4©fi^fi^fc^ft-r-S,7 ; "$^B^©Sli^E 

6. Sfc, Bi#Mgl35 5B. a#+B#4S^L-^ofc 
B«0-fe7-> 3 > ■ +-©«£«fc-fe? >>a> • 
50 iSELT. ^SMiOH^-^OBf^-ftfcffll^C 



(10) 
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[0089] mwamm i a. 3>?>^rat-9— * 

K«HlK:NTRUfiH«»#*S)&fflt,»-Cl»**J. MM. 
«nH5 7 0. ^»i/»*©Jf*KJ:»), Dec r i p 
tion Fai lure*?@tTWiipf5M?i 10 

[0 0 9 0] H5fctt. iftt«15t3>f>'> 

3nBTtrt>nsffisfflE©«Hi*je©-w 

^lytl^, {IU ftSttRH&Kl 5tt. NTRUfi 
£J3*>, WKC. 3>f>^Efi1>--^l 3 8, NTR 

us§§«bs wnm. <fc s&mii e „ t c tiK3Bejffcttfi 

[0 09 1 ]Sf, £ 5-f7> r- £ bT©*^«B* 
1 5«, S«OfiHttE,«^««?*gC arti 20 
f i cat i onA££fif£ (PI). 

[0 09 2] 3>7->^i2ff-^-^l 3WJt?», C(DM 
fi«Cer t i f i ca t i o n ASrSfrf Si, * 
2T*CtvS:&IETS. 

[0 09 3] *y^jWEU>£^Sftfc*£fett. 
S««£»3 3-C. ffiEBKfcJBl,>sa»N b 4, -fef 

&C JStS&^^i'a • TJl^UXAKJ:*). -te^>3> 
•t-dS^yi/ailHash (SJ SIHTT 
S„ ^OT. N b , S„, Hash (S J ^JIwiffBS 30 
*1 5©SHI^.ri&Ht{bt/C. C*i**^»«*BS 
SP3 4r£^lfcl^f«C ertification 

Btthictmmmm^i simmz (P2> . 

[0 094] SMUifgi&S 1 5 WJ-Cii, HT-§£ C e r 
t i f i c a t i o n B £Bi-5f r-f E„ (Nb, Sb, 
Hash (SJ ) iflhftZji ?-fe-i>4g#rS£, 
fBEiSiEi Decription Failure ©^ 

[0 09 5] H6KB. Ji^lf^S^ 1 5ffliJrfTfcft-5 
fflSMlE £ D ecript ionFai lure ©t&IE 40 
*£b-t*Tff 5 fc»©*HI*J«* 7 a - * r - r ©JfJ^ 

f •£„ 

[ o o 9 6 ] i-r, w¥m&m»5 2-en?m%c e 

r t i f i ca t i onBfctfcHTS Uf?7 - S 1 
1) . 

[0097] m*m%&iEi,^tmm2tiiL®£ictt 

Uf>7'S 12), Bf^ftMS8R5 5(Cfc^T. Bf-^ 
ftf^E. (N„, S t , Hash ( S J ) Z@.mtb 
t, N b , S k , Hash (S b )§I1Hit 50 
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S 1 3) . 

[ o o 9 8 ] jkht. a^t$nfc-fey^3>-+-© 
ls,id»iyTHCA»f» • r/icf i/XAfcauBi/c 

^©A^afHash' (SJ Zimi (^f-yy'S 
14), eft*Wif-*fr&JRDW;Sftfc/<i*5'»tt 
Has'h'-XSj £-^3*»5fr£ffljrr* (XT'? 
7S 1 5) . ^5i/ a «*ifL<!5:5Ci(cJ:ot, S 
^t»»^* 1 5fflijrttD ecription Fail 

u r eim^br^a^ctimtricti^fsz. 

[0 09 9] »yH5 KRo-CSiW-rS. D e c r i p 
tion F a i 1 u r e #&t>C £rt%fg;ift/dg, 
*^1f$g^Sl 5Ttt. SLJt&38*S5 3T, ffigBHiC 
ffll>5a»N.t. -fe»*/a> • *-©*4&Sft»S. 

KiQ, fer>a>'+-©lS,©^5'yaiHas 
h (SJ fctWTS. *LT, Na, Sa, Hash 
(Sa) feiSSflHINHn 5©&H«E,,-Clf#ffcl>r. 
tBSaiE«©SU»N l> 6d:fe(Cn>f>^E® 

u-w^i 3ccaHrrs (P3) . 

[0100] 3>^>->BB^-m'1 3«r«, SLftN 
bi*NH t -*Eb (Na, Sa, Hash (S J ) *»6 
» *-3?t3HBrr*i. fflSISffit D e c r i p 
tion Fai lure©^Kff^ 

[0 10 1] H7K«, 3>F>?Bflr0wti 3iJf 
frfo ft & Decription Failu 

r e©*K*^*>li-rff5fci&©«BW**7ia-^ + 

[ 0 1 0 2 ] ST, mm»3 7-C, £fi ^ » *-5? 

sjfU«.»3W5**WllO-C Uf^S2 1) , jUfffi* 
#«HHWt^»*-i?E. (N b , S.. Hash (SJ ) 

[0103] a»N b *^tWSiflllT3nfc»^{C 
«, lfiHtfcBI«5 5CCJs«,vC. Bfftffc^-SrE 
» <N„ S.. Hash (SJ ) Zm^itLX. N a , 
S., Hash (SJ *m<0m (Xf77"S2 2) . 

[ 0 1 0 4 ] #Ctvc, a#fbSnfc-fe»^a>-4=-© 

*©Ajf*|Has h ' (SJ £ffr&L U^f^S 
2 3), Cti^SWI^-ffreKOWStifc^y^-il 
Hash (SJ i^SWS*>5fr**W!-r& (Xf? 
7S2 4). ^rVaftJifK^CitcJ:^, 3 
>f >2>EflT!»— ^' 1 ecription 
Fa i 1 u r eim&.LXU&^ZtZmW'rZtltifi 

[0 1 0 5] SW5KIotilt5„ Decrip 
tion Failure *J3Q:t»C timffl-ZtlftM* 



01) 
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mmmm^i 5icm<om? <P4> . 

SLi$l£f&S|35 3 X^bfcN, 4^1A>#>§j!p£*IML 
mmm^mmt^y-t-^E, (N„, S.. Ha 
sh (S.) ) frbN.ZWWtoiiltfr&fr. -?t£t>%* 

[0107] zlx. iMbft^^^c^K), mm 

^Kfc^tDe cription Failure 10 

*H*Z>SHI&£tt. C©-fe » $/ a > • +-4ffll»fc5Sf± 
[0 10 8] 2-0©-b^i'a> • +-©ifiS„£c>*S 1> £ 

flH»r. m«OT©:^cj: 9 -fes-s^g 

[0 10 9] ( 1) S.StfStOXOR (Exclusive 0 
R : SfffeWHIIffi) ffi^-b r> 3 >-+-i^„ 20 
( 2 ) S . ©±&/W r t S „ ©±&X 4 h & 

[0 110] £©£$£> &ffi*i:-££j£;*tlfcffSa 

Cis&*P*fc#& (ffcfcfe. De c r i p t i on 
Failure fc©# % -fe » ~> a > • 

ifpflfflrc 

[0 111]tuT, *®m>?-%<D-P*)W)Z. -fe 
^>a> • *-rif^burs«(rf*c4K:j:9. m 30 

[0 1 1 2] H8ic«, KS||HBRl5i3W; 

eh ?-x 1 3 m?iTt>toZttmm<D9Bm$mv:9i? 

iffll©«*^LTl>S. fit, M^nM8tt^l5«. N 

tr u^Hswew^scct: *ah&e . i c tucmm 
KW®mz&%> mmtc ay^ymm^-^ \ 3 

tt, NTRU^H«tm#*S:{cJ:*&il»tE»iCtl{c 

^f*&»B»*8K> &© i -r 5 . 

[0 1 13] ST. *7-Y7>riL-r©*^tt$B®* 
1 5 B, B^^«E.*£/U:*?«SC e r t i 40 
f i ca t i onASSHTTS (PI 1) . 

[0114] 3>f>^Bit-/M 3fflijr«. c©m 

i41£C e r t i f i c a t i o nAfcSWTf * 

[0 1 1 5] *-?*S3WEU»4flKStlfc»^KB. 
SL»^*SP3 3 "CfflEBEKJI^aSURN,, 
*, eft*ai#w«jt*i 5 W<D<&PBii E . -cut^f t L 
x , c *f*ssjsgp 3 4 raisfi i/&m^»«c e 

r t i f i ca t i onBiifefc*WHINRJS*15R: 
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[0116] tt^ttfRS* 1 m+WZC e r 

t i f i ca t i onBiWH^-^E, (NJ 
S y ^ -b - J**3HI*- 4 i . *?*gttSS|S 3 2 T? 
g£C ertification B©tfcS£fT5. 

fc* ti-ti Bf^t^- $E, (N'„ ) Zmmt b X . N „ 

s&k. sutt&s»5 3rtasi8iE{cffit><&a» 

N. a>f>-5»Efi-!*— xi 3 «©£!!# 

StifcE b (N.)MHash (N„) 

a>f>*;il*-;<l 3(cM#f 5 (PI 

3) . 

[0117] a>f>9Eif-^l 3WrB. E 
„ (N.) MHas h (N„) ££tfj? ^-iz-^J&gfg 
tht. *^t»$gS*l 5fc^tvr©BE*J»8:fT5. 
B9KB. a>f>*;iit-;q 3ffliJ-CtT5*^tfl8 
Si^i 5{co^r©iiaE^47o-^^- h©^ser 

tiHIBi&u 5fcot»r©3lE#»fcotvtsiiiri-s. 
[o i i si *r. » • TA=fy^tc«fc 

•) iU»»^SIJ 3 2 L fcSLi* N k ©^ » ff £flf 
WiTh (X?^-S3 1), W*3*ifc^»J/ 
»fW«. «WWW*16«»63WtO^»t'»«Ha 
sh (N b ) £^U>JWfr£*MfS (Xt^:/S3 
2) . 

[0119] cn^»^»«i*j^L asm* 

ffi* 1 5 < ^ , *-2?*a^fcr*fcC 4 
-e#£©-e, «^tffgs*i 5j!)S«©a^ffl^-es.§ 

[0 12 0] ^^f, &fsl>tdl§mkf~-ZE b (N.) 

*»i^ea!»3 5-ea^jttr, «^ttfss^i 5ii© 

SU»N.*8St5Ul-r (^f7 7'S3 3) . 

[0121] ZbX, ffi%<D*vZ/a. -rJ^yXAK 
AOCOftltN.OAr^afiHash (N.) *9r»L 
TUfj^S34). cn^«^t»fg«* 1 5 KJifi 
(Xf^S35) (PI 4) . 

[0 122] ifc. 3>^>^EfilJ--Xl 3«. SL» 

«^*3 3-c«ts-Bfcsa.»N 1> i, w$mm*\b 

[0123] m^ttfBS^ 1 5 ffliJ^B, i\ y ^flHa 
sh (N b ) &£tsjt v"z-V*%!mSht. 3>f-> 
^E©9— XI 3K-3l>r©HfflE«!ai*fT^. 01 0 5C 
«. fRS* 1 5 mx-ft *) a >f>7ieff- x l 
3fco^r©^imE^*7n-^-f - h©^Sr^Lr 

e#*- x i 3 ic^x<Dmm^Mic-o\ l >xmm-?z>* 
[0 124] t-T, 3fS©A5.-> a • r/bdryXAKj: 



(12) 
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=t>f->?IHItfwU 3*>e.^Lfc^^> 
^ttHa sh (N.) 43EU>*5a>4«W*S 
yy'S4 2) . 

[0 12 5] cl*l6/^>*<iia^§;U>*§£, 3>^> 
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